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AMENDMENTS TO THE CLAIMS 

In the claims 

This listing of claims will replace all prior versions, and listings, of claims in the 
application: 

1 . (Currently Amended) A method for managing security on a business application 
management platform implemented on a computer, comprising the steps of: 

partitioning a plurality of business objects into a hierarchy plurality of hi e rarchical domains; 

and 

creating a security list configured to grant a member the right to perform a security operation 
on a [[said]] business object located in said hi e rarchical domain hierarchy of domains, comprising 
the steps of: 

adding said security operation to said security list; 

applying said security operation to a given domain and to each child domain of the 

* 

given domain on e of said plurality of domains ; and 

adding said member to said security list. 

2. (Original) The method of Claim 1, wherein said partitioned business objects are grouped 
together in specific categories and/or classes. 

3. (Original) The method of Claim 1, wherein the right to perform said security operation is 
shared by more than one member. 

4. (Original) The method of Claim 2, wherein said security operation is performed on said 
category or class of business objects. 

5. (Original) The method of Claim 1, wherein said security operation is assigned based on a 
customizable partitioning of said business objects into said plurality of hierarchical domains. 
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6. (Original) The method of Claim 1, wherein said security operation is predefined to apply to 
all of said business objects located in said plurality of hierarchical domains. 

7. (Original) The method of Claim 1, wherein said security operation represents a group of one 
or more security operations 

8. (Currently Amended) The method of Claim 1, 

wherein said partitioned business objects are grouped together in specific categories and/or 
classes; and 

wherein at least one [[said]] category and/or class of business objects defines additional 
security operations that can be performed on said business objects within said at least one category 
and/or class of business objects. 

9. (Original) The method of Claim 1, wherein said domains are partitioned based on 
geography, divisions, and/or business function. 

10. (Currently Amended) The method of Claim 1, wherein said security list is a global security 
list configured to apply across said hierarchy of plurality of hi e rarchical domains. 

11. (Original) The method of Claim 1, wherein said member is an individual user, associated 
with a generic role, and/or associated with an automated process. 

12. (Currently Amended) A computer security management system for managing security on a 
business application management platform, comprising: 

a partitioning mechanism configured to partition a plurality of business objects into a 
plurality hierarchy of hi e rarchical domains; 

a security list mechanism configured to create a security list, said security list comprising: 
a security operation, wherein said security operation is applied to at least one of said 
plurality of domains and to all of the child domains of the at least one domain ; and 
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a member, wherein said security list grants said member the right to perform said 
security operation in the at least one domain and in all of the child domains of the at least one 
domain of said hi e rarchical domains . 

13. (Original) The system of Claim 12, wherein said partitioned business objects are grouped 
together in specific categories or classes. 

14. (Original) The system of Claim 12, wherein the right to perform said security operation is 
shared by more than one member. 

15. (Original) The system of Claim 13, wherein said security operation is performed on said 
category or class of business objects. 

16. (Currently Amended) The system of Claim 12, wherein said security operation is assigned 
based on a customizable partitioning of said business objects into said hierarchy plurality of 
hi e rarchical domains. 

17. (Currently Amended) The system of Claim 12, wherein said security operation is predefined 
to apply to all of said business objects located in said hierarchy plurality of hi e rarchical domains. 

18. (Original) The system of Claim 12, wherein said security operation represents a group of 
one or more security operations 

19. (Currently Amended) The system of Claim 12, 

wherein said partitioned business objects are grouped together in specific categories and/or 
classes; and 

wherein at least one [[said]] category and/or class of business objects defines additional 
security operations that can be performed on said business objects within said at least one category 
and/or class of business objects. 
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20. (Original) The system of Claim 12, wherein said domains are partitioned based on 
geography, divisions, and/or business function. 

21 . (Currently Amended) The system of Claim 12, wherein said security list is a global security 
list and is configured to apply across said hierarchy plurality of hi e rarchical domains. 

22. (Original) The system of Claim 12, wherein said member is an individual user, associated 
with a generic role, and/or associated with an automated process. 

23. (Currently Amended) A computer-readable storage medium containing computer executable 
code for implementing a security management system for managing security on a business 
application management platform by instructing a computer to operate as follows: 

partition a plurality of business objects into a hierarchy plurality of hi e rarchical domains; 
create a security list by further instructing the computer to operate as follows: 
add a security operation to said security list; 

apply said security list to at least one of said plurality of domains and to all child 
domains of the at least one domain ; and 

add said member to said security list, wherein said security list is configured to grant 
a member the right to perform said security operation in each domain to which it has been applied 
on e of said hi e rarchical domains . 

24. (Original) The computer-readable storage medium of Claim 23, wherein said partitioned 
business objects are grouped together in specific categories or classes. 

25. (Original) The computer-readable storage medium of Claim 23, wherein the right to 
perform said security operation is shared by more than one member. 
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26. (Original) The computer-readable storage medium of Claim 24, wherein said security 
operation is performed on said category or class of business objects. 

27. (Currently Amended) The computer-readable storage medium of Claim 23, wherein said 
security operation is assigned based on a customizable partitioning of said business objects into said 
hierarchy plurality of hi e rarchical domains. 

28. (Original) The computer-readable storage medium of Claim 23, wherein said security 
operation is predefined to apply to all of said business objects located in each domain. 

29. (Original) The computer-readable storage medium of Claim 23, wherein said security 
operation represents a group of one or more security operations 

30. (Currently Amended) The computer-readable storage medium of Claim 23, 

wherein said partitioned business objects are grouped together in specific categories and/or 
classes; and 

* 

wherein at least one [[said]] category and/or class of business objects defines additional 
security operations that can be performed on said business objects within said at least one category 
and/or class of business obj ects . 

31. (Original) The computer-readable storage medium of Claim 23, wherein said domains are 
partitioned based on geography, divisions, and/or business function. 

32. (Currently Amended) The computer-readable storage medium of Claim 23, wherein said 
security list is a global security list and is configured to apply across said hierarchy plurality of 
hi e rarchical domains. 
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